Global Group Ransomware

Global Group is a ransomware-as-a-service operation first observed in June 2025, marketed by an actor using the handle "Dollar Dollar Dollar" and a rebrand of the BlackLock and Eldorado ransomware families, running double-extortion attacks across a wide range of sectors.